ODBC connection for Active Directory user who doesn't log in to Windows

Question

Do you think it is possible to create a SQL Server ODBC Connection for an Active Directory user who doesn't log in to Windows.

Ideally this type of users will be used in a batch process. So, another person logs in and creates a batch process and runs it with another user.

Note: I don't want to enable SQL Server authentication. Instead would like to use Active Directory.

Answer 1

Although you cannot login to SQL Server unless you use either a SQL Server Login or a Windows Account with permissions to connect to the SQL Server, you could create a low-permission user that can EXEC certain stored procedures. Those stored procedures could then contain code that switches into the context of another, more highly privileged account.

EXECUTE AS Login = 'DOMAIN\User';
SELECT * FROM sys.databases;
REVERT 

Read more about EXECUTE AS on MSDN.

Answer 2

You can deny local logon to a Windows user thus it will only be allowed to be used as a service account.

Answer 3

A quick review of Microsoft documentation suggests the answer is no as it was in 2011 when a very similar question was addressed on Stack Exchange https://stackoverflow.com/questions/6720193/how-can-i-send-an-odbc-connection-string-to-an-sql-server-if-the-user-is-authent